IN THE CLAIMS: 

Please cancel Claims 28 to 33 without prejudice or disclaimer of subject 

matter. 



1 . (Currently Amended) A method for securely storing a public key for 
encryption of data in a computing device, the method using a user-specific key pair which 
is securely stored in the computing device, the method comprising: 

a user authenticating step of authenticating a user who logs into the 
computing device: 

a registering step of registering the user-specific kev pair of the user 
authenticated bv said authenticating step, wherein the user-specific key pair is registered in 
a secure registry: 

a receiving step of receiving a target public key corresponding to a target 

device; 

an obtaining step of obtaining a-the user-specific key pair from trthe secure 

registry; 

a key encrypting step of using a user-specific private key from the user- 
specific key pair to create a target key verifier based on the target public key; 

a storing step of storing the target key verifier and the target public key in a 

storage area; 

a retrieving step of retrieving the target key verifier and the target public key 
firom the storage area; 
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a recognizing step of recognizing a printing instruction; 

a verification step of applying, in response to recognizing the printing 
instruction, a user-specific public key from the user-specific key pair to the target key 
verifier for verifying the authenticity of the target public kev , wherein said verification step 
verifies whether the public key in the storage area and the public kev in the secure registry 
correspond to each other : and 

a data encrypting step of encrypting data with the target public key, in the 
case that the authenticity of the target public key is verified, thereby creating encrypted data 
for transmission to the target device. 

2. (Original) A method according to Claim 1, wherein the user-specific key 
pair is obtained from a key function call which is supported by an operating system 
executing in the computing device. 

3. (Original) A method according to Claim 2, wherein the operating system 
securely maintains a user-specific key pair for each of a plurality of users of the computing 
device. 

4. (Original) A method according to Claim 3, wherein each user-specific 
key pair can only be accessed by providing the operating system with user identification 
data corresponding to the user-specific key pair. 
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5. (Original) A method according to Claim 1 , wherein the target key 
verifier created in the key encrypting step is an encrypted version of the target public key. 



6. (Canceled). 

7. (Original) A method according to Claim 5, wherein the verification step 
includes decrypting the target key verifier with the user-specific public key using a 
decryption algorithm. 

8. (Original) A method according to Claim 7, wherein the verification step 
further includes using a key verification algorithm to compare the decrypted target key 
verifier to the target public key for verifying the authenticity of the target public key. 

9. (Original) A method according to Claim 8, wherein the verification step 
is performed by a verification function call which is supported by an operating system 
executing in the computing device. 

10. (Original) A method according to Claim 1, wherein the target key 
verifier created in the key encrypting step is a digital signature of the target public key. 

1 1 . (Original) A method according to Claim 1 0, wherein the digital 
signature of the target public key is created by applying a hashing algorithm to the target 
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public key to obtain a target key hash, and then encrypting the target key hash with the 
user-specific private key using an encryption algorithm. 



12. (Currently Amended) A method according to Claim 10, wherein the 
digital signature of the target public key is created by applying a hashing algorithm to the 
target public key to obtain a target key hash, and then subjecting the target key hash to a 
security an encryption algorithm. 

13. (Original) A method according to Claim 12, wherein the verification 
step includes decrypting the target key verifier with the user-specific public key using a 
decryption algorithm to obtain a decrypted target key hash. 

14. (Original) A method according to Claim 13, wherein the verification 
step further includes reapplying a hashing algorithm to the target public key to obtain a new 
target key hash and using a hash verification algorithm to compare the decrypted target key 
hash to the new target key hash for verifying the authenticity of the target public key. 

15. (Original) A method according to Claim 14, wherein the verification 
step is performed by a verification function call which is supported by an operating system 
executing in the computing device. 
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16. (Original) A method according to Claim 1, wherein the receiving step 
includes applying a hashing algorithm to the received target public key to obtain a received 
target key hash and using a hash verification algorithm to compare the received target key 
hash to a test target key hash for verifying the authenticity of the received target public key. 

17. (Original) A method according to Claim 16, wherein the test target key 
hash is input by a user. 

18. (Original) A method according to Claim 17, wherein the target device 
is a printer and wherein the test target key hash is obtained from a test page printed by the 
printer. 

19. (Original) A method according to Claim 1, wherein the target device is 
a printer and the target public key is a printer public key. 

20. (Original) A method according to Claim 19, wherein, in the receiving 
step, the printer public key is received in response to a key request sent to the printer. 

21. (Original) A method according to Claim 19, wherein the method is 
performed in a printer driver executing on the computing device. 
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22. (Currently Amended) A method for securely storing a printer public 
key for encryption of print data in a computing device, the method using a user-specific key 
pair which is securely stored in the computing device, the method comprising: 

a user authenticating step of authenticating a user who logs into the 
computing device: 

a registering step of registering the user-specific kev pair of the user 
authenticated bv said authenticating step, wherein the user-specific key pair is registered in 
a secure registry: 

a receiving step of receiving a printer public key corresponding to a printer; 

an obtaining step of obtaining a user-specific key pair fi-om a secure registry 
upon receipt of a corresponding user identification; 

a first hashing step of applying a hashing algorithm to the printer public key 
to create a first printer key hash; 

an encryption step of applying an encryption algorithm to encrypt the first 
printer key hash with a user-specific private key from the user-specific key pair, thereby 
creating a printer key signature; 

a storing step of storing the printer key signature and the printer public key 
in a storage area; 

a retrieving step of retrieving the printer key signature and the printer public 
key from the storage area; 

a second hashing step of applying the hashing algorithm to the retrieved 
printer public key to create a second printer key hash; 
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a decrypting step of applying a decryption algorithm to decrypt the printer 
key signature with a user-specific public key from the user-specific key pair, thereby 
retrieving the first printer key hash; 

a recognizing step of recognizing a printing instruction; 

a verification step of applying, in response to recognizing the printing 
instruction, a verification algorithm to compare the first printer key hash with the second 
printer key hash, for verifying the authenticity of the retrieved printer public key , wherein 
said verification step verifies whether the public key in the storage area and the public key 
in the secure registry correspond to each other : and 

a print data encrypting step of applying an encryption algorithm to print data 
using the retrieved printer public key, in the case that the authenticity of the retrieved 
printer public key is verified, to create encrypted print data for transmission to the printer. 

23. (Currently Amended) A method for authentication of a printer public 
key received by a computing device, the method comprising: 

a user authenticating step of authenticating a user who logs into the 
computing device: 

a registering step of registering the user-specific key pair of the user 
authenticated bv said authenticating step, wherein the user-specific key pair is registered in 
a secure registry: 

a first receiving step of receiving in the computing device a printer public 
key corresponding to a printer; 
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a hashing step of applying a hashing algorithm to the printer public key to 
create a first printer key hash; 

a second receiving step of receiving in the computing device a 
predetermined second printer key hash obtained from a test page printed by the printer, 
wherein the second printer key hash is input into the computing device by a user-input 
means connected to the computing device; 

a recognizing step of recognizing a printing instruction; 

a verification step of applying, in response to recognizing the printing 
instruction, a verification algorithm to compare the first printer key hash with the second 
printer key hash, for verifying the authenticity of the received printer public ke y, wherein 
said verification step verifies whether the public key in the storage area and the public key 
in the secure registry correspond to each other : and 

a storing step of storing, in the case that the authenticity of the received 
printer public key is verified in the verification step, the received printer public key in a 
memory area of the computing device. 

24. (Original) A computing device for authenticating a public key for 
encryption of data, said computing device comprising: 

a program memory for storing process steps executable to perform a method 
according to any of Claims 1 to 23; and 

a processor for executing the process steps stored in said program memory. 
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25. (Original) Computer-executable process steps stored on a computer 
readable medium, said computer-executable process steps for authenticating a public key 
for encryption of data, said computer-executable process steps comprising process steps 
executable to perform a method according to any of Claims 1 to 23. 

26. (Original) A computer-readable medium which stores computer- 
executable process steps, the computer-executable process steps to authenticate a public 
key for encryption of data, said computer-executable process steps comprising process 
steps executable to perform a method according to any of Claims 1 to 23. 

27. (Currently Amended) An information apparatus which transmits 
encrypted data to a target device, the information apparatus securely storing a public key 
for encryption of the data and utilizing a user-specific key pair which is securely stored in 
the apparatus, comprising: 

authenticating means for authenticating a user who logs into the computing 

device: 

registering means for registering the user-specific kev pair of the user 
authenticated by said authenticating means, wherein the user-specific key pair is registered 
in a secure registry: 

receiving means for receiving a target public key corresponding to a target 

device; 
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obtaining means for obtaining a user-specific key pair from a secure 

registry; 

key encrypting means for using a user-specific private key from the user- 
specific key pair to create a target key verifier based on the target public key; 

storing means for storing the target key verifier and the target pubHc key; 

retrieving means for retrieving the target key verifier and the target pubHc 
key from the storing means; 

recognizing means for recognizing a printing instruction; 

verification means for applying, in response to recognizing the printing 
instruction, a user-specific public key fi"om the user-specific key pair to the target key 
verifier for verifying the authenticity of the target public key , wherein said verification 
means verifies whether the public kev in the storage area and the public key in the secure 
registry correspond to each other : and 

data encrypting means for encrypting data with the target public key, in the 
case that the authenticity of the target public key is verified, thereby creating encrypted data 
for transmission to the target device. 



28. to 34. (Cancelled) 
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